2 matches found
GHSA-GJ5F-73VH-WPF7 Withdrawn Advisory: cross-zip is vulnerable to Directory Traversal through selective use of zip/unzip operations
Withdrawn Advisory This advisory has been withdrawn because it does not discuss a valid vulnerability. This link is maintained to preserve external references. Original Description All versions of the package cross-zip are vulnerable to Directory Traversal via consecutive usage of zipSync and...
Nadesiko3 操作系统命令注入漏洞
nadesiko3 is a Japanese programming language by the individual developer of kujirahand. A security vulnerability exists in Nadesiko3 PC version v3.3.61 and earlier versions, which can be exploited by an attacker to execute arbitrary operating system commands while zipping and unzipping on the...